Million UK Uber Users Were Compromised In That Hack
Nov 30 2017
Chicago Corporation Counsel Ed Siskel, who filed the complaint in conjunction with Foxx, said that companies should not be permitted to violate the law by "failing to safeguard personal information and then covering it up, preventing those impacted from taking steps to protect themselves", the station reported.
Uber says that the 2.7 million figure is an approximation because some users might disclose a different location to the one where they actually live.
Earlier today, the British Information Commissioner's Office said about 2.7 million user accounts in the United Kingdom were affected.
About 50 million Uber passengers had their names, addresses and phone numbers breached, but the hackers also got driver's license numbers for about 7 million Uber drivers, including 10,888 in Washington, Ferguson said. "There is no excuse for keeping this information from consumers". When a data breach puts people at risk, businesses must inform them, " Ferguson said in a news release.
The Data Privacy Act penalizes the concealment of security breaches involving sensitive information with imprisonment ranging from 18 months to five years and a fine of not less than PHP500,000.
However, Attorney General Ferguson contends that each day that Uber failed to report the breach to each of the drivers-as well as to his office-counts as a separate violation.
The company made the admission to the information Commissioner's Office (ICO) which is investigating the incident, which affected 58 million users and drivers and was kept secret until last week.
The attorney general is seeking a penalty of $2,000 for each of the almost 11,000 Washington residents affected by the breach. Under such a theory, he argues that Uber should face a penalty of several millions of dollars.
Several states, including Missouri, Massachusetts and NY, have opened investigations, and the city of Chicago sued Uber on Tuesday for failing to notify affected residents.
In a statement Tuesday, Uber said it takes the matter seriously and is cooperating with regulators.